Astra Linux – vulnerability in cups

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and earlier, the RSS notifier permits path traversal in notify-recipient-uri e.g., rss:///../job.cache, allowing a remote IPP client to write RSS XML bytes outside CacheDir/rss...

USN-7042-3 cups-browsed vulnerability

USN-7042-2 released an improved fix for cups-browsed. This update provides the corresponding update for Ubuntu 24.10. Original advisory details: Simone Margaritelli discovered that cups-browsed could be used to create arbitrary printers from outside the local network. In combination with issues i...

UBUNTU-CVE-2024-47176

CUPS is a standards-based, open-source printing system, and cups-browsed contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. cups-browsed binds to INADDRANY:631, causing it to trust any packet from any source, and can cause t...

cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes

A flaw was found in OpenPrinting CUPS. In certain conditions, a remote attacker can add a malicious printer or directly hijack an existing printer by replacing the valid IPP URL with a malicious one. Also, it is possible that due to a lack of validation of IPP attributes returned by the server,...

cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes

A flaw was found in OpenPrinting CUPS. In certain conditions, a remote attacker can add a malicious printer or directly hijack an existing printer by replacing the valid IPP URL with a malicious one. Also, it is possible that due to a lack of validation of IPP attributes returned by the server,...

cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes

A flaw was found in OpenPrinting CUPS. In certain conditions, a remote attacker can add a malicious printer or directly hijack an existing printer by replacing the valid IPP URL with a malicious one. Also, it is possible that due to a lack of validation of IPP attributes returned by the server,...

USN-7043-1 cups-filters vulnerabilities

Simone Margaritelli discovered that the cups-filters cups-browsed component could be used to create arbitrary printers from outside the local network. In combination with issues in other printing components, a remote attacker could possibly use this issue to connect to a system, created manipulat...

USN-7042-1 cups-browsed vulnerability

Simone Margaritelli discovered that cups-browsed could be used to create arbitrary printers from outside the local network. In combination with issues in other printing components, a remote attacker could possibly use this issue to connect to a system, created manipulated PPD files, and execute...

Xerox Workcentre 5735 LDAP Service Redential Extractor

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Xerox Workcentre 5735 LDAP Service Redential Extractor', 'Description' = %q This module extract the printer's LDAP username and password from Xer...

Vulnerability found in Xerox printers

A researcher has found a vulnerability in VersaLink printers from Xerox. The vulnerability allows an unauthenticated remote malicious party capable of causing a denial-of-service cause. In order to exploit the vulnerability, the attacker must obtain a TIFF document with incomplete image directory...

December 14, 2021—KB5008255 (Security-only update)

December 14, 2021—KB5008255 Security-only update Applies To Windows Server 2012 Windows Embedded 8 Standard Summary Learn more about this security update, including improvements and fixes, any known issues, and how to get the update. Note IMPORTANT Windows Server 2012 has reached the end of...

December 14, 2021—KB5008285 (Security-only update)

December 14, 2021—KB5008285 Security-only update Applies To Windows 8.1 Windows Server 2012 R2 Windows Embedded 8.1 Industry Enterprise Windows Embedded 8.1 Industry Pro Summary Learn more about this security update, including improvements and fixes, any known issues, and how to get the update...

December 14, 2021—KB5008282 (Security-only update)

December 14, 2021—KB5008282 Security-only update Applies To Windows 7 Enterprise ESU Windows 7 Professional ESU Windows 7 Ultimate ESU Windows Server 2008 R2 Enterprise ESU Windows Server 2008 R2 Standard ESU Windows Server 2008 R2 Datacenter ESU Windows Embedded Standard 7 ESU Windows Embedded...

December 14, 2021—KB5008277 (Monthly Rollup)

December 14, 2021—KB5008277 Monthly Rollup Applies To Windows Server 2012 Windows Embedded 8 Standard Summary Learn more about this security update, including improvements and fixes, any known issues, and how to get the update. Note IMPORTANT Windows Server 2012 has reached the end of mainstream...

December 14, 2021—KB5008206 (OS Build 18363.1977)

December 14, 2021—KB5008206 OS Build 18363.1977 Applies To Windows 10 Enterprise, version 1909 Windows 10 Enterprise and Education, version 1909 Windows 10 IoT Enterprise, version 1909 EXPIRATION NOTICE As of 9/12/2023, KB5008206 is only available from Windows Update. This update is no longer...

December 14, 2021—KB5008207 (OS Build 14393.4825) - EXPIRED

December 14, 2021—KB5008207 OS Build 14393.4825 - EXPIRED Applies To Windows 10, version 1607, all editions Windows Server 2016, all editions EXPIRATION NOTICE As of 9/12/2023, KB5008207 is no longer available from Windows Update, the Microsoft Update Catalog, or other release channels. We...

November 22, 2021—KB5007266 (OS Build 17763.2330) Preview

November 22, 2021—KB5007266 OS Build 17763.2330 Preview Applies To Win 10 Ent LTSC 2019 Win 10 IoT Ent LTSC 2019 Windows 10 IoT Core LTSC Windows Server 2019 Note 11/9/21 IMPORTANT Because of minimal operations during the holidays and the upcoming Western new year, there won’t be a preview releas...

November 9, 2021—KB5007192 (OS Build 14393.4770) - EXPIRED

November 9, 2021—KB5007192 OS Build 14393.4770 - EXPIRED Applies To Windows 10, version 1607, all editions Windows Server 2016, all editions EXPIRATION NOTICE As of 9/12/2023, KB5007192 is no longer available from Windows Update, the Microsoft Update Catalog, or other release channels. We recomme...

CVE-2021-34481

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or...

CVE-2015-5583

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to bypass intended sandbox restrictions and obtain sensitive PD...